Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: Jc9fcO0f0j87CoqaJYepYS+uAFXD3fSQZY++x8K8gR4=
Subject key identifier: DC:1C:6C:7A:B1:B4:44:83:1F:D5:15:35:5C:8D:56:77:39:C0:57:49
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53849426B9CD21AA1533139B1487EFF5AAF5D55B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5511.roa
Signing time: Wed 11 Jun 2025 00:00:08 +0000
ROA not before: Tue 10 Jun 2025 23:55:08 +0000
ROA not after: Wed 10 Jun 2026 00:00:08 +0000
asID: 5511
IP address blocks: 82.21.94.0/24 maxlen: 24
82.21.150.0/24 maxlen: 24
82.21.169.0/24 maxlen: 24
82.22.86.0/24 maxlen: 24
82.22.96.0/24 maxlen: 24
82.22.111.0/24 maxlen: 24
82.22.114.0/24 maxlen: 24
82.22.120.0/24 maxlen: 24
82.22.121.0/24 maxlen: 24
82.22.122.0/24 maxlen: 24
82.22.123.0/24 maxlen: 24
82.22.141.0/24 maxlen: 24
82.22.144.0/24 maxlen: 24
82.22.171.0/24 maxlen: 24
82.22.175.0/24 maxlen: 24
82.22.197.0/24 maxlen: 24
82.23.3.0/24 maxlen: 24
82.23.4.0/24 maxlen: 24
82.23.5.0/24 maxlen: 24
82.23.6.0/24 maxlen: 24
82.23.15.0/24 maxlen: 24
82.23.44.0/24 maxlen: 24
82.23.45.0/24 maxlen: 24
82.23.46.0/24 maxlen: 24
82.23.47.0/24 maxlen: 24
82.23.48.0/24 maxlen: 24
82.23.50.0/24 maxlen: 24
82.23.51.0/24 maxlen: 24
82.23.52.0/24 maxlen: 24
82.23.53.0/24 maxlen: 24
82.23.55.0/24 maxlen: 24
82.23.56.0/24 maxlen: 24
82.23.57.0/24 maxlen: 24
82.23.58.0/24 maxlen: 24
82.23.61.0/24 maxlen: 24
82.23.62.0/24 maxlen: 24
82.23.63.0/24 maxlen: 24
82.23.64.0/24 maxlen: 24
82.23.69.0/24 maxlen: 24
82.23.74.0/24 maxlen: 24
82.23.79.0/24 maxlen: 24
82.23.123.0/24 maxlen: 24
82.23.134.0/24 maxlen: 24
82.23.135.0/24 maxlen: 24
82.24.8.0/24 maxlen: 24
82.24.17.0/24 maxlen: 24
82.24.25.0/24 maxlen: 24
82.24.26.0/24 maxlen: 24
82.24.63.0/24 maxlen: 24
82.24.90.0/24 maxlen: 24
82.24.105.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
82.25.134.0/24 maxlen: 24
82.26.83.0/24 maxlen: 24
82.26.204.0/24 maxlen: 24
82.27.20.0/24 maxlen: 24
82.27.101.0/24 maxlen: 24
82.27.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:84:94:26:b9:cd:21:aa:15:33:13:9b:14:87:ef:f5:aa:f5:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 10 23:55:08 2025 GMT
Not After : Jun 10 00:00:08 2026 GMT
Subject: CN=DC1C6C7AB1B444831FD515355C8D567739C05749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:f3:25:ad:6e:b6:06:76:f1:04:6d:ad:01:
f9:2a:30:73:83:9e:96:69:27:5c:29:f2:80:0d:fd:
01:77:cd:41:d7:40:bc:ac:1e:6a:be:2d:19:0f:09:
af:35:8e:58:97:ab:97:39:b9:e1:df:70:98:1c:42:
da:f6:62:e9:7a:33:b0:11:92:0f:5c:29:0c:5d:8a:
36:85:41:64:dd:d8:63:23:08:2e:c6:da:02:1a:f9:
35:1c:b5:0c:1b:50:60:34:89:60:a5:c4:dd:de:be:
83:e9:dd:a1:ef:26:56:61:97:20:f6:23:af:98:36:
16:4c:de:bf:61:14:3e:f6:74:7f:54:93:9a:68:93:
20:32:6b:b3:07:eb:8b:20:e1:a8:e2:b3:83:f9:95:
a9:4e:a5:30:e4:23:90:4a:74:d4:8e:77:8e:21:51:
1a:67:92:a5:21:08:90:2b:17:75:e2:20:87:b7:7e:
9d:62:fb:0e:c3:e7:20:4b:f5:5a:46:ed:4b:fb:0d:
8d:4d:9d:f5:5d:29:93:b7:d8:be:88:dc:04:e6:77:
6f:8e:40:97:1b:8b:e9:82:8f:8f:95:0e:47:e2:d7:
10:bc:2b:3e:c4:fe:cc:c6:ed:2b:4a:f5:13:70:bd:
96:10:cd:73:6b:10:4f:19:f2:b6:47:8c:7b:99:47:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:6C:7A:B1:B4:44:83:1F:D5:15:35:5C:8D:56:77:39:C0:57:49
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.94.0/24
82.21.150.0/24
82.21.169.0/24
82.22.86.0/24
82.22.96.0/24
82.22.111.0/24
82.22.114.0/24
82.22.120.0/22
82.22.141.0/24
82.22.144.0/24
82.22.171.0/24
82.22.175.0/24
82.22.197.0/24
82.23.3.0-82.23.6.255
82.23.15.0/24
82.23.44.0-82.23.48.255
82.23.50.0-82.23.53.255
82.23.55.0-82.23.58.255
82.23.61.0-82.23.64.255
82.23.69.0/24
82.23.74.0/24
82.23.79.0/24
82.23.123.0/24
82.23.134.0/23
82.24.8.0/24
82.24.17.0/24
82.24.25.0-82.24.26.255
82.24.63.0/24
82.24.90.0/24
82.24.105.0/24
82.24.175.0/24
82.25.134.0/24
82.26.83.0/24
82.26.204.0/24
82.27.20.0/24
82.27.101.0/24
82.27.103.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ed:b1:89:f8:41:60:e7:34:17:ec:72:60:44:2e:4a:bf:fc:
ea:eb:ce:5e:9d:4e:99:45:43:e4:dc:32:b2:25:80:a1:e9:0f:
42:fb:c8:97:fc:24:35:e4:be:b5:80:de:d6:f1:05:99:20:13:
6c:2e:ac:ba:2e:92:da:93:9f:8c:31:d6:50:5b:66:cc:fc:33:
d1:6a:21:05:92:52:e9:e4:b9:6b:df:4d:b0:91:4d:6c:38:96:
3c:6a:19:99:e7:fa:b0:9b:03:3a:8e:f6:7d:11:b7:78:cf:83:
ee:5c:e5:c1:0a:63:c0:0c:80:10:16:18:26:34:ca:c3:de:a7:
51:33:f7:66:5c:fc:5f:20:b4:bd:a0:22:53:d1:dc:f2:b6:54:
6a:cc:a8:5a:c3:4c:ae:84:de:1a:f6:7a:a0:5b:18:19:2c:74:
c4:5d:2a:7d:31:d6:be:3e:6d:e8:88:bf:f9:4f:ea:8b:4b:11:
a8:05:a4:1a:20:82:08:ff:bb:cc:6f:91:61:40:c6:23:d6:5b:
a8:71:19:75:5e:39:f9:81:47:49:5d:b9:70:b1:a2:16:6b:41:
99:13:af:4c:77:2a:e2:6a:67:20:86:9e:49:3b:a6:a6:9e:29:
c9:07:d6:15:91:9f:20:ed:1b:98:b4:88:1e:63:1e:fe:36:b0:
b2:6f:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:15 2025 by rpki-client